If you need to search using the Microsoft Exchange Troubleshooting Assistant for anything sent to a particular domain rather than just an email address you will need to do this using the Exchange Management Shell as the Message Tracking Parameters don’t allow you to enter a wildcard domain in the sender address. This can be particularly useful when a user has an issue receiving emails from multiple email addresses at the same domain.
To do this:
Step 1
Open up the Exchange Management Shell as an Administrator (right click)
Step 2
Enter either of the following commands replacing the @YOURDOMAIN with the domain you are searching for.
To show the results on the screen only
Get-MessageTrackingLog -ResultSize Unlimited -Start "30/05/2015" -End "11/06/2015" | where{$_.sender -like "*@YOURDOMAIN"} | select-object Timestamp,SourceContext,Source,EventId,MessageSubject,Sender,{$_.Recipients}
To export the results to a log file
Get-MessageTrackingLog -ResultSize Unlimited -Start "30/05/2015" -End "11/06/2015" | where{$_.sender -like "*@lifestyleaustralia.com.au"} | select-object Timestamp,SourceContext,Source,EventId,MessageSubject,Sender,{$_.Recipients} | export-csv C:\ExchangeLogResults.txt